From d0e809a32cd58c0d89b2425aeb245e04a94df7d6 Mon Sep 17 00:00:00 2001
From: Frederic Guillot <fred@kanboard.net>
Date: Sun, 6 Dec 2015 08:23:53 -0500
Subject: Add new method to flush session variables

---
 app/Core/Security/AuthenticationManager.php |  2 +-
 app/Core/Session/SessionStorage.php         | 15 +++++++++++++++
 2 files changed, 16 insertions(+), 1 deletion(-)

(limited to 'app')

diff --git a/app/Core/Security/AuthenticationManager.php b/app/Core/Security/AuthenticationManager.php
index dbc41b09..8e5f76be 100644
--- a/app/Core/Security/AuthenticationManager.php
+++ b/app/Core/Security/AuthenticationManager.php
@@ -71,7 +71,7 @@ class AuthenticationManager extends Base
         if ($this->userSession->isLogged() ) {
             foreach ($this->filterProviders('SessionCheckProviderInterface') as $provider) {
                 if (! $provider->isValidSession()) {
-                    unset($this->sessionStorage->user);
+                    $this->sessionStorage->flush();
                     $this->preAuthentication();
                     return false;
                 }
diff --git a/app/Core/Session/SessionStorage.php b/app/Core/Session/SessionStorage.php
index 11230793..f55a7ee3 100644
--- a/app/Core/Session/SessionStorage.php
+++ b/app/Core/Session/SessionStorage.php
@@ -61,6 +61,21 @@ class SessionStorage
         return $session;
     }
 
+    /**
+     * Flush session data
+     *
+     * @access public
+     */
+    public function flush()
+    {
+        $session = get_object_vars($this);
+        unset($session['storage']);
+
+        foreach (array_keys($session) as $property) {
+            unset($this->$property);
+        }
+    }
+
     /**
      * Copy class properties to external storage
      *
-- 
cgit v1.2.3